Ticket #41934: is_bad_request_test.php

<?php
// Load the WordPress Environment
// define( 'WP_DEBUG', true ); /* uncomment for debug mode */


require('./wp-load.php');


/**
 * Don't load all of WordPress when handling a favicon.ico request.
 *
 * Instead, send the headers for a zero-length favicon and bail.
 *
 * @since 3.0.0
 */
function wp_favicon_request_x() {
        $isBad = wp_is_bad_request('ico');
        if($isBad){
                header('Content-Type: image/vnd.microsoft.icon');
                exit;
        }
}



add_filter('wp_is_bad_request_extensions', 'rdp_mime_types_filter');
function rdp_mime_types_filter($mimes){
    unset($mimes['mp3|m4a|m4b']);
    unset($mimes['ra|ram']);
    unset($mimes['wav']);
    unset($mimes['ogg|oga']);
    unset($mimes['mid|midi']);
    unset($mimes['wma']);
    unset($mimes['wax']);
    unset($mimes['mka']);
    return $mimes;
}

/**
 * Check if we have received a junk request, based on file extension.
 * 
 * Use the 'wp_is_bad_request_extensions' filter to add or remove allowed file extensions.
 * 
 * Use the 'wp_is_bad_request' filter to return the boolean value of a custom evaluation.
 * 
 * As a 'best practice', plugin developers should utilize this function as a
 * way to prevent running plugin code unnecessarily.
 * 
 * @author Robert D Payne <rpayne@rdptechsolutions.com>
 * 
 * @param string $extension Extension of requested file
 * @return bool True if the the HTTP request is considered junk, false otherwise 
 */
function wp_is_bad_request($extension) {
    $isBad = false;
    
    if(!empty($extension)){
        $ext = strtolower($extension);
        $mimes = apply_filters('wp_is_bad_request_extensions', wp_get_mime_types()) ;

        foreach($mimes as $key=>$value):
            if(count(explode('|',$key)) > 1){
                $isBad = (strpos($key, $ext) !== false);
            } else {
                $isBad = ($key === $ext);      
            }
            if($isBad)break;
        endforeach;         
    }

    return apply_filters( 'wp_is_bad_request', $isBad);
}//is_bad_request

$isBad = wp_is_bad_request('wav');

var_dump($isBad);